CVE-2014-7250

EPSS 3.7%
Published: 12/12/2014Modified: 6/4/2024

Description

The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers to cause a denial of service (resource consumption) via crafted packets.

Affected packages (1)

References (3)